cli-tools
Warn
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/lib/path_check.shmodifies shell profile files such as.bashrc,.zshrc, and.profileto append PATH exports and shell initialization hooks, which functions as a persistence mechanism for environment configuration. - [COMMAND_EXECUTION]: Several scripts, including
scripts/auto_update.shandscripts/installers/package_manager.sh, utilizesudoto perform administrative tasks like system-wide package updates and writing to protected directories like/usr/local/bin. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs binaries, archives, and scripts from remote sources including GitHub, GitLab, and vendor-specific domains like HashiCorp and GetComposer during tool setup and updates.
- [COMMAND_EXECUTION]: The
scripts/installers/package_manager.shscript employsbash -cto execute version-check commands defined within JSON catalog files, constituting dynamic execution of shell logic.
Audit Metadata